Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: aCboYIGW5gtn5Q117Yyb4PLUqzBufBY9zk0N4OoNeEA=
Subject key identifier: F1:1B:F4:AF:E6:84:41:F3:28:26:8A:05:20:60:D0:AA:A2:DC:80:9F
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 019872D016DB99D0F1AA984B90468057A8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 163C
Signing time: Mon 04 Aug 2025 02:01:36 +0000
Manifest this update: Mon 04 Aug 2025 02:01:36 +0000
Manifest next update: Tue 05 Aug 2025 02:01:36 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: n0uA7iBXQ/HVXk15XyrpYMNyc1cJnP5auxIfDHE/uRs=)
2: DLqkJtVUmV3t_NSFK9gSKIls7d0.roa (hash: mC4NzL71O1LVPsjh1kWalWyRrj4+h6csfx67YmiitPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:16:db:99:d0:f1:aa:98:4b:90:46:80:57:a8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Aug 4 02:01:36 2025 GMT
Not After : Aug 5 02:01:36 2025 GMT
Subject: CN=f11bf4afe68441f328268a052060d0aaa2dc809f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:06:30:57:da:b3:cf:a8:33:58:5f:4a:bb:
71:91:51:e4:5e:4e:74:8d:7e:1b:d5:c5:84:79:ef:
97:d1:fd:85:3b:de:fa:2b:ea:20:35:26:b7:19:32:
4f:59:c3:88:0b:d0:1b:46:c9:ec:88:7a:b0:78:cf:
68:de:f7:fa:11:0a:ac:b9:13:db:70:aa:df:c4:28:
f0:4b:55:8b:fd:b6:63:3c:75:08:64:4e:2b:7e:00:
2f:31:0d:e9:81:31:04:15:e1:6f:4f:0d:5e:8f:25:
73:d3:db:82:f1:53:0c:0e:57:98:bb:f6:5f:d7:85:
4d:8e:c6:b5:e5:ed:99:37:bb:dd:5d:3e:22:07:b1:
40:20:ef:09:df:9c:96:12:68:7a:bc:ff:b6:fc:0a:
98:1f:a7:7d:f7:11:2d:89:ad:7c:f3:a3:cd:a0:3a:
98:a4:c6:95:f1:18:c3:2c:62:22:b3:5a:26:35:6e:
52:ff:a7:e9:89:92:bf:e1:b2:5b:78:11:57:2c:0d:
46:4f:05:e3:ab:f1:fd:e5:5d:68:1a:e1:06:20:24:
dd:be:01:1f:d6:d6:64:fd:7c:dd:45:b5:2d:22:3e:
56:22:90:89:62:9a:16:bb:79:85:39:21:b5:63:97:
e9:a0:2d:34:e3:29:78:87:a5:03:65:67:e1:bc:ec:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1B:F4:AF:E6:84:41:F3:28:26:8A:05:20:60:D0:AA:A2:DC:80:9F
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:26:d6:d6:b6:b9:53:a9:03:14:2c:2b:50:80:a2:dd:ca:d7:
20:de:c7:36:dc:b1:ed:ce:e3:ac:7f:8c:09:d4:d7:24:03:93:
38:96:28:80:f0:c2:2d:43:80:85:73:a5:de:f0:d0:1c:87:3b:
8c:6a:0f:8a:39:fb:9b:5f:c4:cd:c4:2d:9b:5c:8f:37:26:35:
0c:6a:7f:6d:50:d6:c5:26:c0:b2:e8:b6:97:16:8b:1c:c2:87:
81:9a:07:a4:bf:5e:eb:49:93:24:48:b7:41:08:33:95:53:25:
fd:59:a4:07:92:b5:54:2d:32:5e:16:50:82:dd:d5:c8:7e:d6:
9f:99:c3:87:34:d6:a7:a4:71:64:b4:33:1b:98:bb:0e:34:08:
c3:91:5d:98:5d:9a:e5:4c:47:f2:b3:61:bc:0e:ca:dd:46:59:
82:df:0d:d9:6a:21:f0:b4:16:1d:1c:16:40:7d:f6:58:4b:a0:
03:88:65:a8:d3:42:3d:86:a4:13:f3:41:06:16:04:79:70:62:
ed:9a:b8:bd:8b:5d:34:e6:36:e0:9d:c8:7b:df:f8:d1:99:0c:
33:d2:a1:e4:c6:e8:f2:e9:a6:60:62:2f:10:17:af:ab:78:c5:
55:40:01:d5:d6:9e:3b:e0:10:c9:fc:7d:47:9b:dd:72:3c:b9:
64:d5:a3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:17 2025 by rpki-client